$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3133382e3132312e3235322e302f32332d3233203d3e20323632373635.roa File: 3133382e3132312e3235322e302f32332d3233203d3e20323632373635.roa (raw, json) Hash identifier: UXqOL/Hzeq6KHHD0SY6sIAnbylYDWeKMa9HcRkAi7II= Subject key identifier: 9A:83:1A:7C:32:F4:0B:23:1E:45:88:31:5E:2D:A4:A0:BC:03:4A:88 Certificate issuer: /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0 Certificate serial: 2BFF2B9983FB605ED9EAA4154FA043ACC4A56AC1 Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer Subject info access: rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3133382e3132312e3235322e302f32332d3233203d3e20323632373635.roa Signing time: Wed 22 Oct 2025 20:48:46 +0000 ROA not before: Wed 22 Oct 2025 20:43:46 +0000 ROA not after: Wed 21 Oct 2026 20:48:46 +0000 asID: 262765 IP address blocks: 138.121.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ff:2b:99:83:fb:60:5e:d9:ea:a4:15:4f:a0:43:ac:c4:a5:6a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0 Validity Not Before: Oct 22 20:43:46 2025 GMT Not After : Oct 21 20:48:46 2026 GMT Subject: CN=9A831A7C32F40B231E4588315E2DA4A0BC034A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:d8:61:ee:4e:51:3e:4e:52:db:4d:2c:69: 91:aa:73:2e:a4:73:fb:dd:00:33:46:42:09:e4:62: 5c:62:5b:25:0c:fd:eb:5b:b6:2a:21:08:be:25:92: b7:8c:2d:9c:a5:27:69:29:3c:2b:cf:6a:20:a5:63: e5:ba:2c:6f:cc:d2:e0:8f:f8:71:69:95:39:33:04: 21:b7:d0:40:45:52:07:c9:77:43:e1:e5:2d:96:cb: df:03:75:f9:fc:ed:b5:a0:7f:c3:50:e8:d4:80:65: 62:d9:09:18:3c:49:53:b2:79:2a:91:fc:3d:a2:6b: e6:d7:51:0d:ed:0d:b0:6d:eb:85:44:55:ac:a5:6e: 93:0c:e6:0d:0c:7e:ee:dd:3a:fb:53:60:d0:bb:45: 65:3e:2b:ac:cd:4a:fa:27:33:99:af:7b:e0:25:b7: aa:3c:74:c8:f9:e1:5d:39:7b:0d:b8:4b:b1:f7:2e: 8c:c9:4e:12:ac:2c:3d:d2:5e:a2:f3:06:b0:a3:9f: f9:3f:be:76:d8:48:63:9c:24:ef:12:49:1e:3c:54: c5:45:db:9f:d3:ba:4d:aa:de:65:54:21:87:b8:b3: a2:0a:e4:e0:ce:00:52:d4:c4:71:b8:3d:b6:e4:b1: dd:1c:16:be:58:47:7b:9f:48:0d:5f:98:88:dd:21: e4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:83:1A:7C:32:F4:0B:23:1E:45:88:31:5E:2D:A4:A0:BC:03:4A:88 X509v3 Authority Key Identifier: keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3133382e3132312e3235322e302f32332d3233203d3e20323632373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.252.0/23 Signature Algorithm: sha256WithRSAEncryption 28:71:cf:6e:0d:58:25:05:21:af:b6:68:2e:ff:84:03:a6:3d: bb:22:e6:af:fd:47:68:dd:46:50:0c:c0:6b:df:9f:22:ce:f7: ea:05:4a:63:c8:26:98:23:30:32:36:5c:b3:9b:56:6f:15:f3: 0a:55:08:c6:55:ff:19:96:ea:21:e7:04:55:90:6d:6d:09:de: f5:06:d7:91:4a:41:6c:c6:d4:59:2b:f6:a9:be:fb:e5:80:1f: e3:32:93:f1:fe:89:2c:91:5e:f2:de:7f:db:96:52:42:69:94: 96:1e:37:f9:17:52:93:c4:fa:62:d7:2c:c3:78:cf:d2:ae:ff: 02:8d:91:b9:e9:b4:24:df:ec:8e:6e:bb:93:ec:20:85:b9:1b: 9d:8a:a6:bd:5f:1e:29:be:44:65:e4:e8:9d:f9:ce:87:03:76: 1b:29:27:62:48:1a:06:1f:f0:79:67:df:6d:99:d6:81:bf:c2: df:ef:87:56:8e:5a:fa:47:e0:90:37:88:e2:21:dd:5f:d1:f1: bb:dd:61:11:9e:f4:10:ac:35:64:e1:e2:cc:11:d9:d1:a4:5d: 7b:ba:3a:dd:96:55:fe:bc:4a:68:29:18:3c:01:85:ac:ee:45: 85:18:f2:70:3f:c7:10:ea:5a:62:11:ea:78:7b:8d:c7:88:4c: 68:6d:b3:57 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUK/8rmYP7YF7Z6qQVT6BDrMSlasEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1 N0ZFN0JBMDAeFw0yNTEwMjIyMDQzNDZaFw0yNjEwMjEyMDQ4NDZaMDMxMTAvBgNV BAMTKDlBODMxQTdDMzJGNDBCMjMxRTQ1ODgzMTVFMkRBNEEwQkMwMzRBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgONhh7k5RPk5S200saZGqcy6k c/vdADNGQgnkYlxiWyUM/etbtiohCL4lkreMLZylJ2kpPCvPaiClY+W6LG/M0uCP +HFplTkzBCG30EBFUgfJd0Ph5S2Wy98Ddfn87bWgf8NQ6NSAZWLZCRg8SVOyeSqR /D2ia+bXUQ3tDbBt64VEVaylbpMM5g0Mfu7dOvtTYNC7RWU+K6zNSvonM5mve+Al t6o8dMj54V05ew24S7H3LozJThKsLD3SXqLzBrCjn/k/vnbYSGOcJO8SSR48VMVF 25/Tuk2q3mVUIYe4s6IK5ODOAFLUxHG4Pbbksd0cFr5YR3ufSA1fmIjdIeQTAgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUmoMafDL0CyMeRYgxXi2koLwDSogwHwYDVR0j BBgwFoAUdxacrDG0nUgM8Q5XGcw8e1f+e6AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY LzIvNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1N0ZFN0JBMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83NzE2OUNBQzMxQjQ5RDQ4MENG MTBFNTcxOUNDM0M3QjU3RkU3QkEwLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzIvMzEz MzM4MmUzMTMyMzEyZTMyMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz MjM3MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB BwEB/wQQMA4wDAQCAAEwBgMEAYp5/DANBgkqhkiG9w0BAQsFAAOCAQEAKHHPbg1Y JQUhr7ZoLv+EA6Y9uyLmr/1HaN1GUAzAa9+fIs736gVKY8gmmCMwMjZcs5tWbxXz ClUIxlX/GZbqIecEVZBtbQne9QbXkUpBbMbUWSv2qb775YAf4zKT8f6JLJFe8t5/ 25ZSQmmUlh43+RdSk8T6Ytcsw3jP0q7/Ao2Ruem0JN/sjm67k+wghbkbnYqmvV8e Kb5EZeTonfnOhwN2GyknYkgaBh/weWffbZnWgb/C3++HVo5a+kfgkDeI4iHdX9Hx u91hEZ70EKw1ZOHizBHZ0aRde7o63ZZV/rxKaCkYPAGFrO5FhRjycD/HEOpaYhHq eHuNx4hMaG2zVw== -----END CERTIFICATE-----Generated at Thu Nov 6 01:18:22 2025 by rpki-client